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1 Introduction 

In this thesis we shall present two logical systems, MP and MP*, for the 
purpose of reasoning about knowledge and effort. These logical systems will be 
interpreted in a spatial context and therefore, the abstract concepts of knowledge 
and effort will be defined by concrete mathematical concepts. 

Our general framework consists of a set of possible worlds (situations, scenar- 
ios, consistent theories, etc.) A state of knowledge is a subset of this set and our 
knowledge consists of all facts common to the worlds belonging to this subset. 
This subset of possibilities can be thought as our view. Thus two knowers having 
distinct views can have dif ferent k nowledg e. This tr eatmen t of know ledge agrees 
with the traditional one ( |Hin62| , jHM84|] , |PR85| , |CM86| , |FHV9l|| ) expressed 



in a variety of contexts (artificial intelligence, distributed processes, economics, 
etc.) 

Our treatment is based on the following simple observation 

"a restriction of our view increases our knowledge." 

This is because a smaller set of possibilities implies a greater amount of common 
facts. Moreover, such a restriction can only be possible due to an increase of 
information. And such an information increase can happen with spending of 
time or computation resources. Here is where the notion of effort enters. A 
restriction of our view is dynamic (contrary to the view itself which is a state) 
and is accompanied by effort during which a greater amount of information 
become s available to us (Pratt expresses a similar idea in the context of processes 



[|Pra95] 



We make two important assumptions. 

Our knowledge has a subject. We collect information for a specific purpose. 
Hence we are not considering arbitrary restrictions to our view but restric- 
tions parameterized by possibilities contained in our view, i.e. neighborhoods 
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of possibilities. After all, only one of these possibilities is our actual state. 
This crucial assumption enables us to express topological concepts and use a 
mathematical set-theoretic setting as semantics. Without such an assumption 
these ideas would have been expressed in the familiar theory of intuitionism 
( ]Hcy56t , pum77| , |TvD88| .) As Fitting points out in pt69 | 



"Let {Q,1Z,\=} be a [intuitionistic, propositional] model. Q is in- 
tended to be a collection of possible universes, or more properly, 
states of knowledge. Thus a particular V in Q may be considered 
as a collection of (physical) facts known at a particular time. The 
relation 1Z represents (possible) time succession. That is, given two 
states of knowledge T and A of Q, to say VIZ A is to say: if we now 
know r, it is possible that later we will know A." 

Considering neighborhoods and, inevitably, points which parameterize neighbor- 
hoods, the important duality between the facts, which constitute our knowledge, 
and the possible worlds, where such facts hold, emerges. 

The other assumption is that of indeterminacy. Each state of knowledge 
is closed under logical deduction. Thus an increase of knowledge can happen 
only by a piece of evidence or information given from outside. Our knowledge 



is external (a term used by Parikh to describe a similar idea in [Par87t].) This 
fact leads to indeterminacy (we do not know which kinds of information will 
be available to us, if at all) and resembles indeter minacy e x pressed in intuition- 
ism through the notion of lawless sequence (see | Kre58| , [ Iro77 |) where, not 
surprisingly, topological notions arise. 

To illustrate better these simple but fundamental ideas we present the fol- 
lowing examples: 



Suppose that a machine emits a stream of binary digits representing the 
output of a recursive function /. After time ti the machine emitted the 
stream 111. The only information we have about the function being com- 
puted at this time on the basis of this (finite) observation is that 

/(l) = f{2) = /(3) = 1. 

As far as our knowledge concerns / is indistinguishable from the constant 
function 1, where l(n) = 1 for all n. After some additional time £2, i-e. 
spending more time and resources, might appear and thus we could be 
able to distinguish / from 1. In any case, each binary stream will be an 
initial segment of / and this initial segment is a neighborhood of /. In 
this way, we can acquire more knowledge for the function the machine 
computes. The space of finite binary streams is a structure which models 
computation. Moreover, this space comprises a topological space. The set 
of binary stre ams u nder the prefix ordering is an example of Alexandrov 



topology (see Vic 



A policeman measures the speed of passing cars by means of a device. 
The speed limit is 80 km/h. The error in measurement which the device 
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introduces is 1 km/h. So if a car has a speed of 79.5 km/h and his device 
measures 79.2 km/h then he knows that the speed of the passing car lies in 
the interval (78.2, 80.2) but he does not know if the car exceeds the speed 
limit because not all values in this interval are more than 80. However, 
measuring again and combining the two measurements or acquiring a more 
accurate device he has the possibility of knowing that a car with a speed 
of 79.5 km/h does not exceed the speed limit. Note here that if the 
measurement is, indeed, an open interval of real line and the speed of a 
passing car is exactly 80 km/h then he would never know if such a car 
exceeded the speed limit or not. 

To express this framework we use two modalities K for knowledge and □ for 



effort. Moss and Parikh observed in MP92 | that if the formula 



A -> OKA 

is valid, where A is an atomic predicate and O is the dual of the □, i.e. O = -iEH, 
then the set which A represents is an open set of the topology where we interpret 
our systems. Under the reading of O as "possible" and K as "is known", the 
above formula says that 

"if A is true then it is for A possible to be known" , 



i.e. A is affirmative. Vickers defines similarly an affirmative assertion in | Vic89 



"an assertion is affirmative iff it is true precisely in the circumstances 
when it can be affirmed." 

The validity of the dual formula 

□ L4 -» A, 

where L is the dual of K, i.e. L = — >K— expresses the fact that the set which A 
represents is closed, and hence A is refutative, meaning if it does not hold then it 
is possible to know that. The fact that affirmative and refutative assertions are 
represented by opens and closed subsets, respectively, should not come to us as a 
surprise. Affirmative assertions are closed under infinite disjunctions and refuta- 



tive assertions are closed under infinite conjunctions. Smyth in [3my83| observed 
first these properties in semi-decidable properties. Semi-decidable properties are 
those properties whose truth set is r.e. and are a particular kind of affirmative 
assertions. In fact, changing our power of affirming or computing we get another 
class of properties with a similar knowledge-theoretic character. For example, 
using polynomial algorithms affirmative assertions become polynomially semi- 
decidable properties. If an object has this property then it is possible to know 
it with a polynomial algorithm even though it is not true we know it now. 

Does this framework suffers from the problem of logical omniscience? Only 
in part. Expressing effort we are able to bound the increase of knowledge de- 
pending on information (external knowledge.) Since the modality K which corre- 
sponds to knowledge is axiomatized by the normal modal logic of S5, knowledge 
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is closed under logical deduction. However, because of the strong computational 
character of this framework it does not seem unjustified to assume that in most 
cases (as in the binary streams example) a finite amount of data restricts our 
knowledge to a finite number of (relevant) formulae. Even without such an as- 
sumption we can incorporate the effort to deduce the knowledge of a property 
in the passage from one state of knowledge to the other. 

We have made an effort to present our mate rial somewhat inde penden tly 
However, knowledge of basic modal logic, as in | Chc80 |, | HC84 |, or [Fit93], is 
strongly recommended. 

The language and semantics of our logical framework is presented in Chap- 
ter 0. In the same Chap ter we present two systems: MP and MP*. The 
former was introduced in MP92| and was proven complete for arbitrary sets 
of subsets. It soon became evident that such sets of subsets should be com- 
bined, whenever it is possible, to yield a further increase of knowledge or we 
should assume a previous state of other states of knowledge where such states 
are a possible. Therefore the set of subsets should be closed under union and 
intersection. Moreover, topological notions expressed in MP make sense only 
in topological models. For this reason we introduce an extension of the set of 
axioms of MP and we call it MP*. In Chapter ||, we study the topological 
models of MP* by semantical means. We are able to prove the reduction of the 
theory of topological models to models whose associated set of subsets is closed 
under finite union and intersection. Finding for each satisfiablc formula a model 
of bounded size we prove decidability for MP*. The results of this chapter will 
appear in |Geo93|. In Chapter^, we prove that MP* is a complete system for 
topological models as well as topological models comprised by closed subsets. 
We also give necessary and sufficient conditions for turning a Kripke frame into 
such a topological model. In Chapter ||, we present the modal algebras of MP 
and MP* and some of their properties. Finally, in Chapter ^ we present some 
of our ideas towards future work. 



2 Two Systems: MP and MP* 

In section |2.l| we shall present a language and semantics which appeared first 



in [MP92 . In section 2.2, we shall present the axiom system MP, introduced 



and proven sound and complete with a class of models called subset spaces in 



[MP92 , and the axiom system MP*, introduced by us, which we shall prove 



sound and complete for, among other classes, the class of topological spaces. 
2.1 Language and Semantics 



We follow the notation of [MP92| 



Our language is bimodal and propositional. Formally, we start with a count- 
able set A of atomic formulae containing two distinguished elements T and _L. 
Then the language C is the least set such that A C C and closed under the 
following rules: 
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<j),ip e £ e £ 

cf> Atp G £ -.0, K</> e £ 

The above language can be interpreted inside any spatial context. 

Definition 1 Let X be a set and a subset of the powerset of X, i.e. 
C V{X) such that We call the pair (X, O) a subset space. A model is 

a triple (X, 0, i), where (X, 0) is a subset space and i a map from A to V{X) 
with i(T) = X and i(_L) = called initial interpretation. 

We denote the set {(x, U) : x e X,U e O, and x G C7} C X x by 1x0. 
For each J7 e let j[7 be the set {V : V e and V C £7} the lower closed set 
generated by U in the partial order (0, C), i.e. \U = P(J7) H 0. 

Definition 2 The satisfaction relation \= M , where is the model (X, 0, i), 
is a subset of (XxO) x £ defined recursively by (we write x, U\= M 4> instead of 
((x,U),<P)e^ M ): ' 



x,U^ M A 


iff 


x G i(A), where A E A 




if 


^ ^Htw^ and X ' ^HmV' 




if 




x,U\= M K4, 


if 


for all y E U, y,U\= M (f> 


x,U^ M a^ 


if 


for all V e IU such that x 6 V, x, ^1=^ 



If x, U\= M <f> for all (x, 17) belonging to XxO then (f> is wZid in 7W, denoted by 

M\=4>. 

We abbreviate -iD—itf) and — iK— 10 by and Lip respectively. We have that 
x, U\= M \-4> if there exists ye (7 such that y, U\= M (f) 

x, U\= M 0(f) if there exists V 6 such that V C [/, x G V, and x, ^|=^^i. 

Many topological properties are expressible in this logical system in a natural 
way. For instance, in a model where the subset space is a topological space, i(A) 
is open whenever A — > OKA is valid in this model. Similarly, i(A) is nowhere 
dense whenever LOK-.A is valid (cf. JMP92[ .) 

Example. Consider the set of real numbers R with the usual topology of open 
intervals. We define the following three predicates: 



Pi 


where 


i(pi) 


= w 


Ii 


where 




= (— 00, 7r] 


la 


where 




= (7T, +00) 


Q 


where 


i(q) = 


= {q : q is rational } 



There is no real number p and open set U such that p, t/^Kpi because that 
would imply p = 7r and [7 = {7r} and there are no singletons which are open. 
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A point x belongs to the closure of a set W if every open U that contains 
x intersects W. Thus n belongs to the closure of (n, +00), i.e every open that 
contains ir has a point in (%, +00). This means that for all U such that tt E U, 
7T, Z7|=Ll2, therefore tt, R|=DLl2. Following the same reasoning tt, R|=nii, since 
tt belongs to the closure of (— 00, tt}. 

A point x belongs to the boundary of a set W whenever x belong to the 
closure of W and X — W. By the above, tt belongs to the boundary of (—00, tt] 
and 7r,R|=n(Lli A Ll 2 ). 

A set W is closed if it contains its closure. The interval i(Ii) = (— 00, 7r] is 
closed and this means that the formula DLli — > Ii is valid. 

A set W is dense if all opens contain a point of W. The set of rational 
numbers is dense which translates to the fact that the formula DLQ is valid. To 
exhibit the reasoning in this logic, suppose that the set of rational numbers was 
closed then both DLQ and DLQ — > Q would be valid. This implies that Q would 
be valid which means that all reals would be rationals. Hence the set of rational 
numbers is not closed. 



2.2 MP and MP* 



The axiom system MP consists of axiom schem es [3] through and rules of 
table |] (see page 0) and appeare d first in [ MP92 . 
The following was proved in | MP92|| . 



Theorem 3 The axioms and rules of MP are sound and complete with respect 
to subset spaces. 

We add the axioms [ll] and [l2] to form the system MP* for the purpose 
of axiomatizing spaces closed under union and intersection and, in particular, 
topological spaces. 

A word about the axioms (most of the following facts can be found in any 
introductory book about modal logic, e.g. [Chc80| or | Gol87[ .) The axiom 



expresses the fact that the truth of atomic formulae is independent of the choice 
of subset and depends only on the choice of point. This is the first example of 
a class of formulae which we are going to call bi-persistent and their identifica- 
tion is one of the key steps to completeness. Axioms [j] through ^| and axioms 
[| through [)] are used to axiomatize the normal modal logics S4 and S5 respec- 
tively. The former group of axioms expresses the fact that the passage from one 
subset to a restriction of it is done in a constructive way as actually happens 
to an increase of information or a spending of resources (the classical interpre- 
tation of necessity in intuitionistic logic is axiomatized in the same way). The 
latter group is generally used for axiomatizing logics of knowledge. 

Axiom expresses the fact that if a formula holds in arbitrary subsets is 
going to hold as well in the ones which are neighborhoods of a point. The 
converse is not sound. 

Axiom [ll] is a well-known formula which characterizes incestual frames, i.e. 
if two points (3 and 7 in a frame can be accessed by a common point a then 



G 



Axioms 




1. All propositional tautologies 


2. (A -> OA) A (-iA - 


• o-,A), for A e A 


3. □ (</> -> if,) -> (u<f) - 




4. U(j> -> (f) 




5. U(j) -> ua<f> 




6. K(0^ V) -> (K0- 




7. K0^</> 




8. KK0 




9. -> KL0 




10. KD^ 




11. OOcf) -> 




12. 0(K</> A V) A LO(K</> A x) -> O(KO0 A O-0 A LO X ) 


Rules 


MP 




K-Ncccssitation D-Ncccssitation 

□ 



Table 1: Axioms and Rules of MP* 
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there is a point 5 which can be accessed by both (3 and 7. It appeared in the 



equivalent form (in |VIP92| ) 

OU<f> A OOijj -> Oa((j) A ip) 

and was proved sound in subset spaces closed under (finite) intersection. 

Obviously our attention is focused on axiom [l2| It is sound in spaces closed 
under (finite) union and intersection as the following proposition shows. 

Proposition 4 Axioms 1 through |IJ are sound in the class of subset spaces 
closed under finite union and intersection. 

PROOF. Soundness for Axioms 1 through 11 is easy. For Axiom [T^, suppose 
x, U^O(K(j) Aip) A LO(K0 A x)- 
Since x, U\=0(K<fi A ip), there exists U x C U such that 

x,U x \=K<f>Atp 

and, since x, U\=L(OK(p A □%), there exists y G U and U y C U such that 

y,U y ^A X - 

We now have that U x U U y C U (we assume closure under unions.) Thus 
x,U x {JU y \=KO(f>, y,U x UU y \=KO(f), x,U x UU y \=Otp, and y, U x UU y ^O X - 
Therefore, 

x, C/(=O(KO0 A Oip A LOx). 

I 

With the help of axiom [l2| w e are able to prove the key lemma [33] which leads 
to the DNF Theorem (page |16|.) and this is the only place where we actually use 
it. Any formula, sound in the class of subset spaces closed under finite union 
and intersection, which implies the formula (note the difference from axiom fl2| ) 

O(K0 A ip) A LO(K</> A x) ~> A if) A Lx) 

where 0<f> — > n<fr, Oip — > ip and x ~ ¥ are theorems, can replace axiom [l2l 



3 A Semantical analysis of MP* 
3.1 Stability and Splittings 

Suppose that A is a set and T a topology on A. In the following we assume that 
we are working in the topological space (A, T). Our aim is to find a partition of 
7~, where a given formula <p "retains its truth value" for each point throughout 
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a member of this partition. We shall show that there exists a finite partition of 
this kind. 

Definition 5 Given a finite family T = {Ui, . . . , U n } of opens, we define the 
remainder of (the principal ideal in (T, C) generated by) Uk by 

Rem^C4 = lU k - \J [U,. 

U k 1Ui 



Proposition 6 In a finite set of opens T = {Ui, . . . , U n } closed under inter- 
section, we have 

Rem^U, = lE/i- U W 3 , 

U 3 CU t 

fori = l,...,n. 

We denote {J Uie jr [Ui with [T. 

Proposition 7 If T = {U\, . . . , U n } is a finite family of opens, closed under 
intersection, then 

a. Rem^Ui n Rem^Uj = 0, for i ^ j, 

b. U™=i RenY^f/i = IF, i.e. {Rem' F Ui}" =1 is a partition of I J 7 . We call such 
an T a finite splitting (of 

c. if Vi,V3 G Rem^C/i and Vi is an open such that V\ C V2 C V3 tften 
V2 £ Rem^C/i, i.e. Rerrr^J/i is convex. 

Every partition of a set induces an equivalence relation on this set. The 
members of the partition comprise the equivalence classes. Since a splitting 
induces a partition, we denote the equivalence relation induced by a splitting T 
by -jr. 

Definition 8 Given a set of open subsets Q, we define the relation ~g on T 
with Vi ~' g V 2 if and only if V x C £7 4^ F 2 C [7 for all U E Q. 

We have the following 
Proposition 9 The relation ~'g is an equivalence. 

Proposition 10 Given a finite splitting T , ^'jr—^jr i.e. the remainders of T 
are the equivalence classes of ~^r. 

We state some useful facts about splittings. 

Proposition 11 If Q is a finite set of opens, then C\(G), its closure under 
intersection, yields a finite splitting for [Q . 
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The last proposition enables us to give yet another characterization of re- 
mainders: every family of points in a complete lattice closed under arbitrary 
joins comprises a closure system, i.e. a set of fixed points of a closure operator 
of the lattice (cf. [GHK+80].) Here, the lattice is the poset of the opens of the 
topological space. If we restrict ourselves to a finite number of fixed points then 
we just ask for a finite set of opens closed under intersection i.e. Proposition O. 
Thus a closure operator in the lattice of the open subsets of a topological space 
induces an equivalence relation, two opens being equivalent if they have the 
same closure, and the equivalence classes of this relation are just the remain- 
ders of the open subsets which are fixed points of the closure operator. The 
maximum open in Rem^U, i.e. U, can be taken as the representative of the 
equivalence class which is the union of all open sets belonging to Rem^U. 

We now introduce the notion of stability corresponding to what we mean by 
"a formula retains its truth value on a set of opens" . 

Definition 12 If Q is a set of opens then Q is stable for <fi, if for all x, either 
x, V h</> for all V G Q, or x, V\=^cj> for all V G Q, such that x G V. 

Proposition 13 If Q\,Q% are sets of opens then 

a - if Qi Q Qi and G2 is stable for <fi then Qi is stable for </> , 

b. if Qi is stable for <f> and Q is stable for \ then Qi (~l Q2 is stable for <f> A x- 



Definition 14 A finite splitting T = {Ui, . . . , U n } is called a stable splitting 
for cf), if R&m^Ui is stable for <j> for all Ui S T . 



Proposition 15 If T = {U\, . . . , U n } is a stable splitting for cp, so is 

F = Q{{U (h U 1 ,...,U n }), 

where Uq g . 

The above proposition tells us that if there is a finite stable splitting for a 
topology then there is a closure operator with finitely many fixed points whose 
associated equivalence classes are stable sets of open subsets. 

Suppose that M = (X, T, i) is a topological model for C. Let Tm be a 
family of subsets of X generated as follows: i(A) G Tm for all A G A, if 
S G Tm then X — S G J~m , if S, T G Tm then S n T G J~m , and if S G J~m 
then S° G J-m i.e. Tm is the least set containing G A} and closed under 

complements, intersections and interiors. Let T° M be the set {S^S 1 G J-m}- We 
have T° M = Tm H T, The following is the main theorem of this section. 

Theorem 16 (Partition Theorem) Let Ai — (X, T, i) be a topological model. 
Then there exists a a set {J r ^}^,£c of finite stable splittings such that 

1. 7^ C T° M and X G J 7 " 1 ', for all ip G C, 
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2. if U E then [/+ = {i£ U\x, U^ip} G T M , and 



3. if <p is a subformula of i\) then C T^' and J 7 ^ is a finite stable splitting 
for <p, 

where Tm, as above. 

Proof. By induction on the structure of the formula ip. In each step we take 
care to refine the partition of the induction hypothesis. Rather long proof. i 

Theorem [l6| gives us a great deal of intuition for topological models. It 
describes in detail the expressible part of the topolocical lattice for the com- 
pleteness result as it appears in Chapter |J and paves the road for the reduction 
of the theory of topological models to that of spatial lattices and the decidability 
result of this chapter. 

3.2 Basis Model 

Let T be a topology on a set X and B a basis for T . We denote satisfaction in 
the models (X, T, i) and (X, B, i) by ^ T and \= B , respectively. In the following 
proposition we prove that each equivalence class under contains an element 
of a basis closed under finite unions. 

Proposition 17 Let (X, T) be a topological space, and let B be a basis for T 
closed under finite unions. Let T be any finite subset of T . Then for all V G T 
and all x £ V, there is some U G B with x G U C V and U G RenT^V. 



Corollary 18 Let (X, T) be a topological space, B a basis for T closed under 
finite unions, x G X and U G B. Then 

x,U\= T <f> x,U\= B <p. 



We shall prove that a model based on a topological space T is equivalent to 
the one induced by any basis of T which is lattice. Observe that this enables 
us to reduce the theory of topological spaces to that of spatial lattices and, 



therefore, to answer the conjecture of [MP92] : a completeness theorem for 
subset spaces which are lattices will extend to the smaller class of topological 
spaces. 

Theorem 19 Let (X, T) be a topological space and B a basis for T closed under 
finite unions. Let JV[ 1 = {X,T,i} and JV[ 2 — (X,B,i) be the corresponding 
models. Then, for all <f>, 



li 



3.3 Finite Satisfiability 



Proposition 20 Let {X, T) be a subset space. Let T be a finite stable splitting 
for a formula <f> and all its subformulae, and assume that X E T . Then for all 
U E T , all x E U , and all subformulae ip of <f>, x, U\= T tl) iff x, U^^ij). 

Constructing the quotient of T under ^jr is not adequate for generating a 
finite model because there may still be an infinite number of points. It turns 
out that we only need a finite number of them. 

Let M = (X, T, i) be a topological model, and define an equivalence relation 
~ on X by x ~ y iff 

(a) for all U E T, x E U iff y E U, and 

(b) for all atomic A, x E i(A) iff y G i(A). 

Further, denote by x* the equivalence class of x, and let X* = {x* : x E X}. 
For every U E T let U* = {x* : x E X}, then T* = {U* : U E T} is a 
topology on X*. Define a map i* from the atomic formulae to the powerset 
of X* by i*(A) = {x* : x E i(A)}. The entire model M lifts to the model 
M* = (X*,T*,i*) in a well-defined way. 

Lemma 21 For all x, U , and <\>, 

^Ka> iff x*,U*\= M .4>. 



Proof. By induction on <f>. I 

Theorem 22 If <p is satisfied in any topological space then (f> is satisfied in a 
finite topological space. 

Observe that the finite topological space is a quotient of the initial one 
under two equivalences. The one equivalence is on the open subsets of the 
topological space, where is the finite splitting corresponding to 4> an d its 
cardinality is a function of the complexity of </>. The other equivalence is 
on the points of the topological space and its number of equivalence classes is a 
function of the atomic formulae appearing in <fi. The following simple example 
shows how a topology is formed with the quotient under these two equivalences 
Example: Let X be the interval [0, 1) of real line with the the set 

T = {0}U{ [0,^) | n = 0,1,2,... } 

as topology. Suppose that we have only one atomic formula, call it A, such that 
i(A) — {0}. then it is easy to see that the model (X,T,i) is equivalent to the 
finite topological model (X*,T*,i*), where 

X* = { xi,x 2 }, 
T* = { 0, {£1,2:2} }, and 
i(A) = {an}. 
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So the overall size of the (finite) topological space is bounded by a function 
of the complexity of (p. Thus if we want to test if a given formula is invalid 
we have a finite number of finite topological spaces where we have to test its 
validity. Thus we have the following 

Theorem 23 The theory of topological spaces is decidable. 

Observe that the last two results apply for lattices of subsets by Theorem pi 



4 Completeness for MP H 



Open subsets of a topological space were used in [MP92] and in the previous 
section to provide motivation, intuition and finally semantics for MP*. But 
in this chapter we shall show that the canonical model of MP* is actually 
a set of subsets closed under arbitrary intersection and finite union, i.e. the 
closed subsets of a topological space. However, these results are not contrary 
to our intuition for the following reasons: the spatial character of this logic 
remains untouched. The fact that the canonical model is closed under arbitrary 
intersections implies strong completeness with the much wider class of sets of 
subsets closed under finite intersection and finite union. Now, the results of the 
previous section allow us to deduce strong completeness (in the sense that a 
consistent set of formulae is simultaneously satisfiable in some model) also for 
the class of sets of subsets closed under infinite union and finite intersection, i.e. 
the open subsets of a topological space. 



4.1 Subset frames 



As we noted in section |2.1| we are not interpreting formulae directly over a 
subset space but, rather in the pointed product XxO. The pointed product 
can be turned in a set of possible worlds of a frame. We have only to indicate 
what the accessibility relations are. 

Definition 24 Let (X, O) be a subset space. Its subset frame is the frame 

(XxO,Ru,Rk), 

where 

(x,U)R n (y,V) if U = V 

and 

(a;, U)R K (y, V) if x = y and V C U. 

If O is a topology, intended as the closed subsets of a topological space, we shall 
call its subset frame closed topological frame. 

Our aim is to prove the most important properties of such a frame. We 
propose the following conditions on a possible worlds frame T = (S, i?i,i?2) 
with two accessibility relations 



13 



1. R\ is reflexive and transitive. 



2. i?2 is an equivalence relation. 

3. i?ii?2 ^= R2R1 

4. (ending points) T has ending points with respect Ri, i.e 

for all s £ S there exists so £ S such that for all s' £ S if sRis' 
then s'RiSq. 

5. (extensionality condition) For all s, s' 6 5, if there exists so £ S such that 
sRiSq and s'RiSq and 

for all t G 5 such that ti?2S there exist f', io £ S such that t'R^s' , 
tRito and t'Rito, and for all t' £ S such that t 1 R2S 1 there exist 
t,to £ S such that ii?2«, t'Rito and tRito, 

then s = s'. 

6. (union condition) For all si,S2 G if?, 

if there exists s £ S such that SR2R1S1 and SR2R1S2, then there 
exists s' £ S such that for alH G 5 with ii?2s' then tR\R2S\ or 

ii?li?2S2- 

7. (intersection condition) For all {si}ig/ C 5, 

if there exists s G S such that SiR\s for all i G / then there 
exists s 1 £ S such that for all {ti} C S with tii?2S; and tiRito 
for all z G / and some to £ S then tiRxR^s' . 

8. The frame J 7 is strongly generated in the sense that 

there exists s £ S such that for all s' £ S, SR2R1S'. 

We have the following observations to make about the above conditions. 
Conditions 1 to || and || are first order, while the intersection condition is not. 
The extensionality condition implies the following 

for all s,s' £ S such that sRiSo and s'i?2So then s = s' 

which implies that i?i n R2 is the identity in S. In view of the extensionality 
condition the relation i?i is antisymmetric. So we can replace condition [l] with 
the condition that i?i is a partial order. 
Now, we have the following proposition 

Proposition 25 If(X,T) is a topological space then its closed topological frame 
Tt satisfies conditions ^ through |^. 

The above proposition could lead to the consequence that topological models 
are possible worlds models in disguise. But the following theorem shows that 
this is not the case. There is a duality. 
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Theorem 26 Let T = (S, Ri, R2) be a frame satisfying conditions ^ through^. 
Then T is isomorphic to a closed topological frame Tq . 

Note that, in the above definitions, we could have used equally well the 
equivalence class of s E S under the equivalence induced by the symmetric clo- 
sure of i?i instead of the ending point of s in T. The above proofs show that the 
crucial conditions are conditions |l| through [| and if we are to strengthen or relax 
the union and intersection conditions we get accordingly different conditions in 
the lattice of the set of subsets of the space. The same holds for condition |[ 
We only used this condition to show that there exists a top element, i.e. the 
whole space, and satisfy the hypothesis of the union condition. If we do not 
assume this condition the union of two subsets will belong to the set of subsets 
if they have an upper bound in it. We state this case formally without a proof 
because we are going to use it later. 

Proposition 27 1. Let (X, O) be a subset space closed under infinite inter- 
sections and ifU,V(zO have an upper bound in O then UU V E O. Then 
its frame To satisfies conditions ^ through 

2. A frame T satisfying conditions [J through |^ is isomorphic to a frame To 
where {X, O) as in (1). 



4.2 On the proof theory of MP* 

We shall identify certain classes of formulae in C. This approach is motivated 
by the results of Chapter ||. In f act, these formulae express definable parts of 



the lattice of subsets (see section 3.1 



Definition 28 Let C C £ be the set of formulae generated by the following 
rules: 



<MV>e£' -0, OK0 e £' 
Let C" be the set {K0, L0|0 E £'}. 

Formulae in £ have the following properties 

Definition 29 A formula <fi of C is called persistent whenever <f> — »■ □<; 
theorem (see also JMP9|.) 



A formula <f> of C is called anti-persistent whenever —<(f) is persistent, i.e. 
-up — * □-!</> (or, equivalcntly <><f> — ► 0) is a theorem. 

A formula 4> of C is called bi-persistent whenever (0 — > □</>) A {-up ~ * 
(or, equivalently O0 — > U<f>) is a theorem. 

Thus the truth of bi-persistent formulae depends only on the choice of the 
point of the space while the satisfaction of persistent formulae can change at 
most once in any model. We could go on and define a hierarchy of sets of 
formulae where each member of hierarchy contains all formulae which their 
satisfaction could change at most n times in all models. 
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All the following derivations are in MP* (Axioms 1 through |l2| — see table 
at page g.) 

Proposition 30 All formulae belonging to £ are bi-persistent. 

Proof. We prove it by induction, i.e. bi-persistence is retained through the 
application of the formation rules of C I 

A faster (semantical) proof would be "the initial assignment on atomic for- 
mulae extends to the wider class of £'" ! This implies that formulae in CJ define 
subsets of the topological space. 

Formulae in C" have similar properties as the following lemma show. 

Lemma 31 If <p is bi-persistent then K<fi is persistent and \-<p> is anti-persistent. 

We prove some theorems of MP* that we are going to use later. 

Lemma 32 If <p is bi-persistent then hjyip O(0 A ip) = Otp A Oip. 

The following is the key lemma to the DNF Theorem and generalizes Ax- 
iom |l2| 

Lemma 33 For all n, 

n / n 

h M p- <OK0 A f\ L (OK(j> A tpi) -» O I K(f> A f\ lip., 

i=l \ i=l 

where <p 7 ipi are bi-persistent. 

All formulae of £' can be expressed in terms of bi-persistent, persistent and 
antipersistent formulae by means of the following normal form. 

Definition 34 

1. (p is in prime normal form (PNF) if it has the form 

n 

ij A KV' A f\ lipi 

i=l 

where if),tp',ipi s C and n is finite. 

2. cj> is in disjunctive normal form (DNF) if it has the form Vt=i ^> wri ere 
each <pi is in PNF and m is finite. 

We now give the formal analogue of the Partition Theorem. 

Theorem 35 (DNF) For every (p <E C, there is (effectively) a ip in DNF such 
that 

h M P* (p = tp- 
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The DNF theorem is the most important property of MP*. An immediate 
corollary is that, as far as MP* is concerned, we could have replaced the □ 
modality with OK, since the formulae in normal form are defined using these 
two modalities. Almost all subsequent proof theoretic properties are immediate 
or implicit corollaries of the DNF Theorem. 

We close this section with the following proposition, which together with 
Axiom |ll| shows that DO is equivalent to On. 

Proposition 36 For all <f> £ C, h MP » DO(/> -> <>0<f> 



4.3 Canonical Model 

The canonical model of MP* is the structure 



C=(S } {R D ,R K },v), 

where 

S = {s C C\s is MP* -maximal consistent}, 

sR n t iff {<f> e Cpcj) e s} c t, 
sR K t iff {4> e c\K(j) e s} c t, 
v(A) = {s e S\A e S}, 

along with the usual satisfaction relation (defined inductively): 





iff 


s e v(A) 








s\= c -xf> 


iff 




s\= c (f) A i> 


iff 


s\= c 4> and s\= c ip 


s\= c U<f> 


iff 


for all t £ S, sR n t 


.sh c K0 


iff 


for all t £ S, sR K t 



We write C\=cj), if s|= c </> for all s £ S. 

A canonical model exists for all consistent bimodal systems with the normal 
axiom scheme for each m odality (as MP an d MP*.) We have the following 
well known theorems (see |Che80| , or | Gol87 .) 



Theorem 37 (Truth Theorem) For all s £ S and <j> £ C, 

s\= c 4> iff <fi £ s. 



Theorem 38 (Completeness Theorem) For all <p £ C, 

C\=4> iff ^mp* <t>- 

We shall now prove some properties of the members of C. The DNF theorem 
implies that every maximal consistent theory s of MP* is determined by the 
formulae in £' and C" it contains, i.e. by s PI C and s fl L" . Moreover, the 
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set {Kcf>, L(f>\K<j), Lcf> £ s} is determined by s n £' alone (this is the K-case of the 
DNF theorem.) 

The following definition is useful 

Definition 39 Let P C £ . We say P is an £ theory if P is consistent and 
for all 4> £ £ either <j) £ P or £ P. 

Let SCC". We say S is an £' theory if S is consistent and for all <fr £ C" 
either <j> £ S or -«f> £ S. 

Hence, s tl £ is an £ theory and s n £" is an £" theory. 

What about going in the other direction? When does an £ theory and £' 
theory determine an MP* maximal consistent theory? When their union is 
consistent because in this case there is a unique maximal extension. To test 
consistency we have the following lemma. 

Lemma 40 If P and S are an £ and £' theory respectively then P U S is 
consistent if and only if 

if <f> £ P then L<j) e S. 

It is expected that since £ and £' theories determine MP* maximal con- 
sistent sets they will determine their accessibility relations, as well. 

Proposition 41 For all s, t S S, 

a. sRnt if and only if i. <f> £t if and only if <f> e s, where </>££', 

ii. if L(f) £ t then L<f> £ s, where 4>, ip £ £ . 

b. sR^t if and only if K(f> £ t if and only if K<f> £ s, where (f> £ £ . 

From the above proposition we have that for all s,t £ S, if sRat then 
s n £ = t n £ and if sR K t then s n £' = t D £". 

We write R^Rn for the composition of the relation i?K and R a , i.e. if s, t £ 5, 
we write sR^Rat if there exists r £ S such that sR^r and rR a t. Similarly for 
RoRk- 

For the composite relation RkRo and RoRk we have the following corollary 
of proposition ffl| 

Corollary 42 For all s,t £ S, 

a. sRnRKt if and only if i. if <fi £ s then Left £ t, where <f> £ £, 

ii. if L(j) £ t then £ s, where <fi,ip £ £ . 

b. sR^Rnt if and only if if L0 £ t then L<f> £ s, where <f> £ £ . 

We shall now prove that the canonical model C of MP* satisfies the condi- 



tions of Section 4.1 on page O 



We now have the following 

Theorem 43 The canonical model C of MP* satisfies conditions 1 to 7 of 
Section ^.1 on page Wi. 
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Corollary 44 The canonical frame of MP* is isomorphic to a subset frame 
To c where (X c , O c ) is a subset space closed under infinite intersections and if 
U,V G O c have an upper bound in O c then U VJV S O c . 

By the construction of Theorem X c consists of the ending points of the 
members of the domain of the canonical model. We define the following initial 
assignment i c 

i(A) = { s | A € s }. 

In this way the model A4 — (X c , O c , i c ) is equivalent to the canonical model as 
a corollary of frame isomorphism. 

Corollary 45 For all s £ S and <fi G C we have 

<f> e s if and only if s , U s \= M <j). 

Proposition 46 The frame of a generated submodel C* is isomorphic to a closed 
topological frame. 

Now as above we have the following corollary 

Corollary 47 A submodel C 1 is equivalent to a closed topological model. 

It is a well known fact that a modal system is characterized by the class of 
generated frames of the canonical frame. 

Proposition 48 The system MP* is (strongly) characterized by closed topo- 
logical frames. 

Since the axioms and rules of MP* are sound for the wider class of subset 
spaces with finite union and intersection, we also have the following. 

Proposition 49 The systemMJP* is (strongly) characterized by subset frames 
closed under finite unions and intersections. 

Now by Proposition ^ and pj], Corollary [l8] and Theorem [H] of Chapter [|, 
where we proved the equivalence of a topological model with the model induced 
by a basis closed under finite unions, we have the following corollary 

Corollary 50 The system MP* is (strongly) characterized by open topological 
frames as well as subset frames closed under infinite unions and intersections. 

THc following disjunction property holds for MP* 

if h MP * K(f>i VK02 V. . .VK0„ then h MP > cf>i, for some i, 1 < i < n, 

for <pi, (f>2, ■ ■ ■ , 4>n € Note that the disjunction rule does not hold for S5. 

Proposition 51 MP* provides the above rule of disjunction. 
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We can similarly prove a stronger disjunction property, namely 

if h MP . K0 -> Kfa V K0 2 V . . . V K</>„ 
then h MP « K0 — > 0j, for some i, 1 < i < n, 

for 0, 0i, 02, ... , 0„ £ 

Now we are able to prove the following 

Theorem 52 The canonical model of MP* is strongly generated. 

By Theorem |52| we complete the set of conditions of page [l4| which turn the 
frame of the canonical model into a closed subset frame. To summarize, we have 
the following corollary (note that the canonical subset model is (X c ,O c ,i c ) of 
Corollary ||) 

Corollary 53 The canonical subset model o/MP* is a topological space. 



5 The Algebras of MP and MP* 

In this section we shall give a more general type of semantics for MP and MP* . 
Every modal logic can be interpreted in an algebraic framework. An algebraic 
model is nothing else but a valuation of the propositional variables in a class of 
appropriately chosen algebras. We shall also make connections with the previous 
chapters. 



5.1 Fixed Monadic Algebras 



Interior operators were introduced by McKinsey and Tarski [ MT44 1 . 

Definition 54 An interior operator I on a Boolean algebra B — (B, 0, l,n, U) 
is an operator satisfying the conditions 

I(a n b) = la n lb, 
la < a, 
I la = la, 
II = 1. 



To each interior operator I we associate its dual C = —I—, called closure 
operator. 



Universal quantifiers were introduced by P. Halmos [Hal56|. 

Definition 55 A universal quantifier V on a Boolean algebra B is an operator 
satisfying the conditions 

V(a U V6) = Va U V6, 
Va < a, 
VI = 1. 
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To each universal quantifier V we associate its dual 3 = —V— , called existen- 
tial quantifier. 

Definition 56 Let / be an interior operator on a Boolean algebra B. Let 
IB = {a\a < la} and CB = {a\Ca < a}, i.e. the fixed points of I and C 
respectively. Let B 1 = IB (1 CB then B 1 = {B 1 , 0, 1, n, U) is a Boolean 
subalgebra of B. 

Definition 57 A fixed monadic algebra (FMA) B is a Boolean algebra with 
two operators I and V satisfying 

Via > IV a. 

A valuation v on B is a function from the formulae of MP to the elements 
of B such that 

v(A) E B 1 , where A is atomic, 
v{->4>) = -v(4>), 
v(<f> A i/j) = v{<f))C\v{4>), 

v(4>vtp) = v(4>)uv(4>), 
v(a4>) = iv(4>), 

v(K(j)) = Vv((f>). 

An algebraic model of MP is a FMA B with a valuation v on it. We say <p is 
valid in this model iff v((f>) = 1 and valid in an FMA iff it is valid in all models 
based on this algebra. Finally, <j> is FMA-valid if it is valid in all FMA's. The 
notion of validity can extend to a set of formulae. 

Observe that the important part of the algebra is the smallest subalgebra 
containing B 1 and closed under the operators / and V. 

Theorem 58 (Soundness for FMA-validity) If a formula <p is a theorem 
of MP then 4> is FMA-valid. 

Theorem 59 (Completeness for FMA-validity) If <p is FMA-valid then (f> 
is a theorem of MP. 

5.2 Generated Monadic Algebras 

We shall now define the algebraic models of MP* 

Definition 60 A generated monadic algebra ( GMA ) B is an FMA satisfying 
in addition 

Cla = ICa 

C(Va n b) n 3C(Va n c) < C(VCa n Cb n 3Cc). 

The concepts of algebraic model, validity, GMA-validity are defined as for 
FMA's. We used the direct algebraic translation of MP* axioms but we could 
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have defined it with a different presentation. Observe that we only need Cla < 
ICa because the other direction is derivable (see Proposition p6| .) 
We now have the following 

Theorem 61 (Algebraic completeness of MP*) A formula (f> is a theorem 
of MP* if and only if 4> is GMA-valid. 



It is known that a modal algebra determines a (general) frame (see [ BS84 1 .) 
So, in our case, the canonical algebraic model of MP*, i.e. its Lindenbaum al- 
gebra, must determine a closed topological model (actually its canonical frame.) 
We shall state only the interesting part of this correspondence: the bijection on 
the domains. The accessibility relations are defined in the usual way. 

Theorem 62 There is a bijection between the set of the ultrafilters of the canon- 
ical algebra of MP* and the pointed product XxT, where {X, T) is the canonical 
topology of MP* . 

The general theory of modal logic provides for yet another construction. A 
frame determines a modal algebra. In case of the canonical frame, the modal 
algebra determined must be isomorphic to the canonical modal algebra. In our 
case, this algebra (which must be a GMA) has a nice representation. It is the 
algebra of partitions of the topological lattice as it appeared in Section [O. 



6 Further Directions 

There are several further directions 

1. Due to the indeterminacy assumption (see Introduction) MP* can be a 
"core" logical system for reasoning about computation with approximation 
or uncertainty. 

2. A discrete version of our epistemic framework can arise in scientific exper- 
iments or tests. We acquire knowledge by "a step-by-step" process. Each 
step being an experiment or test. The outcome of such an experiment or 
test is unknown to us beforehand, but after being known it restricts our 
attention to a smaller set of possibilities. A sequence of experiments, test 
or actions comprises a strategy of knowledge acquisition. This model is in 



many respects similar to Hintikka's "oracle" (see [Hin86|.) In Hintikka's 
model the "inquirer" asks a series of questions to an external information 
source, called "oracle". The oracle answers yes or no and the inquirer 
increases her knowledge by this piece of additional evidence. This frame- 
work can be expressed by adding actions to the language. Preliminary 
work of ours used quantales for modelling such processes. A similar work 



without knowledge considerations appears in [AV90| 



3. Since we can express concepts like affirmative or refutative assertions, 
which are closed under infinite disjunctions and conjunctions respectively, 
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it is very natural to add infinitary connectives or fixed points opera- 
tors (the latter as a finite means to express the infinitary connectives.) 
This would serve the purpose of specifying such properties of programs as 



"emits an infinite sequence of ones" (see [Abr91| for a relevant discussion.) 



An interesting direction of linking topological spaces with programs can 



be found in [Par 



Our work in the algebras of MP* looks very promising. GMAs (see ||) 
have very interesting properties. A subalgebra of a GMA corresponds to 
a complete space and this duality can be further investigated with the 
algebraic machinery of modal logic (see | Lcm66a |. Lcm66b |, | Blo80| ) or 
category theoretic methods. 

Axiom ^ forces monotonicity in our systems. If we drop this axiom, an 
application of effort no longer implies a further increase in our knowledge. 
Any change of our state of knowledge is possible. A non-monotonic ver- 
sion of the systems presented in this thesis can be given along the lines 



of [Par87a 



6. It would be interesting to consider a framework of multiple agents. Adding 
a modality for each agent i and assigning a different set of subsets or 
topology to to each agent we can study their interaction or communication 
by set-theoretic or topological means. 

7. From our work became clear that both systems considered here are linked 
with intuitionistic logic. We have embed intuitionistic logic to MP or 
MP* and it would be interesting to see how much of the expressiveness 
of these logics can be carried in an intuitionistic framework. 

8. Finally, in another direction Rohit Parikh considers an enrichment of the 
language to express more (and purely) topological properties such as sep- 
aration properties and compactness. 
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